[dwild]

Does cloudflare check that your self-signed cert has the right signature? MITM would still be possible if it doesn't.